Project

General

Custom queries

Profile

Actions
Copy link

Bug #5912

closed

rfb: parser returns error on unimplemented record types

Added by Victor Julien about 2 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Sascha Steinbiss
Target version:
7.0.0
Affected Versions:
Effort:
Difficulty:
Label:

Description

Parser goes into error state on unimplemented record types. With app-layer.error-policy: drop-flow (default for IPS) this will lead to connections getting dropped.

Related issues 2 (1 open — 1 closed)

Related to Suricata - Feature #5913: rfb: add more record typesNewCommunity TicketActions
Related to Suricata - Bug #5915: rfb: parser returns error on unimplemented record types (6.0.x backport)ClosedSascha SteinbissActions
Actions
Copy link
 #3

Updated by Victor Julien about 2 years ago

A pcap that triggers an error condition can be found in https://github.com/OISF/suricata-verify/pull/1117

Actions
Copy link
 #7

Updated by Philippe Antoine almost 2 years ago

  • Status changed from Assigned to In Review
Actions
Copy link
 #8

Updated by Philippe Antoine almost 2 years ago

  • Status changed from In Review to Resolved
Actions
Copy link

Also available in: Atom PDF